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ABSTRACT 


A system (10), computer program, and method for automatically and 
periodically conducting an inventory of one or more network assets (12) or 
5 resources, such as, for example, servers, workstations, or firewalls, using an agent 
(16) running on each asset (12) to perform the inventory and collect inventory data 
which may thereafter be sent in a secure manner to a designated location where it 
can be parsed and from which pertinent information can be saved. Thereafter, the 
stored information may be used, for example, to generate inventory reports for 
10 determining network vulnerabilities, checking software licenses, and tracking 
network assets. In a preferred embodiment, the system (10) broadly comprises one 
13 or more separate instances of an inventory agent (16); one or more collection 

jj servers (18); a directory server (20); and a reporting server (22). The present 

J invention also makes use of digital certificates for identification, authentication, and, 

|45 optionally, encryption purposes. 
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